Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
File:                     fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json)
Hash identifier:          n/I29n4EYVu0zLv4qOUtKL6sQWz0wbtMXuzbaNDT4uM=
Subject key identifier:   F9:0E:74:A6:DB:45:45:80:F7:6E:70:DB:57:02:0F:D7:D5:4A:81:97
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Certificate issuer:       /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial:       032A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
Manifest number:          031C
Signing time:             Sun 27 Apr 2025 00:49:56 +0000
Manifest this update:     Sun 27 Apr 2025 00:49:56 +0000
Manifest next update:     Sun 04 May 2025 00:49:56 +0000
Files and hashes:         1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: dGLG5ZBH8ZQ9wZdTycfzNsUMf2gY/0yHstPizjTEPW8=)
                          2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: Sr1dJPYf4TMlmdyHmkZ3DvPV6/M5+cUFUvIXCjxQ2mk=)
                          3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: bivJnwcabrf/iwZuZLc+oQKC0osH7DqM8uD5h0VU2hw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
                          rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
        Validity
            Not Before: Apr 27 00:49:56 2025 GMT
            Not After : May  4 00:49:56 2025 GMT
        Subject: CN=680d7f34-99ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:39:ba:8e:83:e4:ba:13:b3:60:1b:f7:eb:
                    87:5a:30:82:25:ef:2b:47:35:1d:be:7f:da:86:19:
                    e6:e3:25:b0:55:aa:f5:ef:db:3c:ad:49:73:62:ed:
                    86:a2:23:9a:a6:13:66:71:0b:cb:5b:2d:ab:7a:bc:
                    2a:df:56:bc:bd:85:4e:43:23:45:26:20:87:25:44:
                    25:fb:a6:08:6c:f0:40:91:89:4a:b0:ea:8d:69:55:
                    bc:88:a2:4d:a5:0e:68:25:af:16:2b:99:fd:ad:2c:
                    c2:51:0a:7d:b5:aa:4f:22:03:d5:54:a4:a6:64:cd:
                    46:4b:74:0c:10:7d:69:c1:72:04:18:0c:db:93:d9:
                    fc:4d:3d:5a:26:88:c8:50:7f:60:ce:37:9f:bc:aa:
                    54:52:9f:1d:91:94:59:05:27:6b:d0:1c:59:c7:83:
                    60:a6:33:5d:82:f9:1c:0b:ea:45:06:be:da:38:56:
                    41:7a:e3:c3:8f:a2:4c:c7:69:d9:31:0b:79:bc:20:
                    f8:a9:c9:87:dc:3f:07:58:b5:44:0f:76:f8:32:3e:
                    64:89:8d:34:dc:a4:7e:9c:a8:ce:e6:14:24:c2:7e:
                    34:7b:c7:67:b8:f9:d2:34:42:9e:d3:d4:de:82:83:
                    fd:30:55:bb:ec:34:07:8a:9d:f4:2f:b2:c6:e8:60:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0E:74:A6:DB:45:45:80:F7:6E:70:DB:57:02:0F:D7:D5:4A:81:97
            X509v3 Authority Key Identifier:
                keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:94:1a:60:df:1a:b5:47:fd:e6:5f:7b:ea:85:b3:4d:71:9f:
         d5:ed:11:30:b8:ab:9f:9d:6d:16:90:fb:bb:69:fa:36:4a:b2:
         24:d1:11:80:be:9c:62:27:53:83:22:07:6a:e5:00:19:28:ec:
         9f:b6:ad:fe:ac:1b:be:5e:e6:74:65:16:c2:dc:31:26:b0:e1:
         39:4e:03:86:a4:82:9e:e4:46:45:4e:9d:10:38:91:b6:b8:11:
         97:f6:fe:81:39:76:96:78:07:ef:75:1b:fd:c5:6c:98:80:bb:
         12:00:fe:7f:64:94:4f:c5:1b:42:32:2c:77:f9:b1:c1:19:c3:
         a0:bb:ec:ee:c1:e0:73:c7:d3:6a:49:d1:49:4c:08:ca:3c:c9:
         46:e1:33:23:ed:4d:25:4e:66:f8:fc:ec:78:03:d2:3f:e0:54:
         61:66:5a:f8:a5:b8:d8:01:64:fa:8d:84:4c:cd:99:1b:ba:a3:
         e2:8c:4c:5c:68:d1:e5:ec:de:d6:59:0a:a6:b0:54:d4:34:ba:
         88:f6:7b:21:1c:32:23:f6:14:09:c5:8f:dd:e6:2f:54:94:f0:
         6d:30:72:34:3b:5b:68:ab:95:14:d6:72:42:02:50:be:43:b1:
         54:e4:f4:c5:0b:a7:d7:a2:ef:0b:f2:eb:5c:a3:d9:fc:bd:b3:
         9a:dc:fc:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgwQjUxMTAvBgNVBAUTKDdFNjVDNThGQTM0M0ExMEM1MzQzNTBBQjQ5N0ZEMDkw
Q0VFRkJGQkIwHhcNMjUwNDI3MDA0OTU2WhcNMjUwNTA0MDA0OTU2WjAYMRYwFAYD
VQQDEw02ODBkN2YzNC05OWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyzg5uo6D5LoTs2Ab9+uHWjCCJe8rRzUdvn/ahhnm4yWwVar179s8rUlzYu2G
oiOaphNmcQvLWy2rerwq31a8vYVOQyNFJiCHJUQl+6YIbPBAkYlKsOqNaVW8iKJN
pQ5oJa8WK5n9rSzCUQp9tapPIgPVVKSmZM1GS3QMEH1pwXIEGAzbk9n8TT1aJojI
UH9gzjefvKpUUp8dkZRZBSdr0BxZx4NgpjNdgvkcC+pFBr7aOFZBeuPDj6JMx2nZ
MQt5vCD4qcmH3D8HWLVED3b4Mj5kiY003KR+nKjO5hQkwn40e8dnuPnSNEKe09Te
goP9MFW77DQHip30L7LG6GC4RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkOdKbb
RUWA925w21cCD9fVSoGXMB8GA1UdIwQYMBaAFH5lxY+jQ6EMU0NQq0l/0JDO77+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBCNS82OTQ2M0QwNENB
M0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9ReFRRMUNyU1hfUWtNN3Z2
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZtWEZqNk5Eb1F4VFExQ3JTWF9Ra003dnY3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODBCNS82OTQ2M0QwNENBM0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9R
eFRRMUNyU1hfUWtNN3Z2N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWlBpg3xq1R/3mX3vqhbNNcZ/V7REwuKufnW0WkPu7afo2SrIk0RGA
vpxiJ1ODIgdq5QAZKOyftq3+rBu+XuZ0ZRbC3DEmsOE5TgOGpIKe5EZFTp0QOJG2
uBGX9v6BOXaWeAfvdRv9xWyYgLsSAP5/ZJRPxRtCMix3+bHBGcOgu+zuweBzx9Nq
SdFJTAjKPMlG4TMj7U0lTmb4/Ox4A9I/4FRhZlr4pbjYAWT6jYRMzZkbuqPijExc
aNHl7N7WWQqmsFTUNLqI9nshHDIj9hQJxY/d5i9UlPBtMHI0O1toq5UU1nJCAlC+
Q7FU5PTFC6fXou8L8utco9n8vbOa3Pwj
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:31 2025 by rpki-client on console.sobornost.net